Vulnerability intelligence
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
CVSS Score
9.9
Critical
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-09-08
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Sep 8, 2026 · latest Sep 8, 2026
Coverage timeline
-
Ivanti ITSM Flaws Expose On-Premise Systems to Remote Code Executionsecurityonline.info · Sep 8, 2026